[PATCH 1/2] corrected logrotate activation rule
David Smith
dsmith at eclipse.ncsc.mil
Fri Oct 11 14:19:19 UTC 2013
---
RHEL6/input/system/logging.xml | 16 ++++++++++++----
1 files changed, 12 insertions(+), 4 deletions(-)
diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
index ae319f6..1f88fa4 100644
--- a/RHEL6/input/system/logging.xml
+++ b/RHEL6/input/system/logging.xml
@@ -357,13 +357,21 @@ used.</description>
<Rule id="ensure_logrotate_activated">
<title>Ensure Logrotate Runs Periodically</title>
-<description>The <tt>logrotate</tt> service should be
-enabled.</description>
+<description>The <tt>logrotate</tt> utility allows for the automatic rotation of
+log files. The frequency of rotation is specified in <tt>/etc/logrotate.conf</tt>,
+which triggers a cron task. To configure logrotate to run daily, add or correct
+the following line in <tt>/etc/logrotate.conf</tt>:
+<pre># rotate log files <i>frequency</i>
+daily</pre>
+</description>
<rationale>Log files that are not properly rotated run the risk of growing so large
that they fill up the /var/log partition. Valuable logging information could be lost
if the /var/log partition becomes full.</rationale>
-<ocil>
-<service-enable-check-macro service="logrotate" />
+<ocil clause="logrotate is not configured to run daily">
+To determine the status and frequency of logrotate, run the following command:
+<pre># grep logrotate /var/log/cron*</pre>
+If logrotate is configured properly, output should include references to
+<tt>/etc/cron.daily</tt>.
</ocil>
<ident cce="27014-0" />
<oval id="logrotate_rotate_all_files" />
--
1.7.1
More information about the scap-security-guide
mailing list